feat: Implement Advanced CodeQL Security Analysis with Native Rust Support

[0xarchit]

Pull Request Description

Summary
This PR introduces a professional-grade security pipeline using GitHub CodeQL. It is specifically tuned for high-performance Rust applications and provides deep analysis of both
code and infrastructure.

Related Issues
Fixes #32

🚀 Key Changes

• Advanced Workflow Logic: Implemented dynamic path-filtering to optimize scan frequency and duration.
• Native Rust Support: Configured the CodeQL v3 engine to perform deep scanning of the Rust source tree.
• Build Flag Synchronization: Ensured the security scanner uses the same MSVC linker optimizations as the production release.
• Security Suites: Enabled extended security and quality query packs for enterprise-level audit depth.
• Permission Hardening: Established global workflow permissions for secure API communication and result publishing.

🛠 Technical Details

• Used dorny/paths-filter@v3 for reliable change detection in Pull Requests.
• Configured the scanning job to run on windows-latest to accurately reflect the application's native environment.
• Implemented security-extended query suites to catch edge-case memory safety patterns.

✅ Verification

• Verified that the YAML syntax is compliant with the latest GitHub Actions standards.
• Confirmed that the detect-changes job correctly maps src/** to the rust matrix.
• Verified that global permissions are sufficient for the analyze job to upload results.

---

By submitting this PR, I agree to follow the project's Code of Conduct.

[0xarchit]

changed reviewed